Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
File:                     V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json)
Hash identifier:          LQuv2LvTE9Xs0DyCnPqYxM6eVSbL3Odv/AWYV9CP0RU=
Subject key identifier:   B0:A4:97:0F:7B:04:E6:19:E8:CB:72:91:7C:29:64:B1:7E:9F:9C:E1
Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08
Certificate issuer:       /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08
Certificate serial:       0968
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
Manifest number:          095B
Signing time:             Wed 20 May 2026 20:09:33 +0000
Manifest this update:     Wed 20 May 2026 20:09:33 +0000
Manifest next update:     Wed 27 May 2026 20:09:33 +0000
Files and hashes:         1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: wb2pb2ho+GF/5bX0acKX9bXEU7EjEmM9iCTMx+N9p/U=)
                          2: D55CBB8CEC5B11F0861F235B4C6F56BC.roa (hash: Chs7RJHAxpaiTO0sowOds/amm/wcM0bzy0SeoAdRBzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl
                          rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408 (0x968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08
        Validity
            Not Before: May 20 20:09:33 2026 GMT
            Not After : May 27 20:09:33 2026 GMT
        Subject: CN=6a0e14fd-f2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:b9:af:91:de:b2:1c:d1:78:16:0a:da:e9:
                    e0:7f:97:cd:d5:ab:f3:58:b0:68:85:85:00:bd:ec:
                    5e:b4:d5:64:80:ef:cf:e0:3b:59:b2:07:ea:fb:2b:
                    d2:55:da:94:0c:ca:c5:d1:ae:ab:6e:80:9d:f2:5d:
                    10:41:74:92:a5:49:c7:e6:d6:e1:0b:84:77:9c:a0:
                    dd:40:25:13:2b:6e:e1:ba:e3:45:92:7a:2a:83:43:
                    28:c2:c4:59:4b:c6:b0:87:e1:91:07:99:2b:63:a0:
                    fc:6c:e8:eb:c3:21:07:db:c4:c1:3e:60:98:a7:39:
                    75:a8:b1:ce:fb:c8:b3:81:22:a5:a8:68:0c:bd:8e:
                    84:c7:cb:2f:36:dc:8a:0a:5e:41:27:0c:81:9f:e3:
                    41:10:38:50:b7:ce:df:f6:7d:48:43:5c:a8:b8:e2:
                    1f:ee:fc:d9:83:32:d1:1e:73:32:fb:79:41:49:0a:
                    df:31:b9:83:43:c4:7e:89:fa:df:15:94:c8:09:4c:
                    2c:8f:cc:9c:84:9b:07:c6:ed:e6:82:53:aa:2e:af:
                    b9:ca:11:3c:9c:c9:af:49:0b:b0:ca:b4:26:b7:64:
                    3c:79:c3:9c:f6:05:83:e8:ae:6f:b1:35:76:32:cd:
                    68:3e:de:e8:f1:ec:58:c6:9a:c9:01:43:7e:51:15:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A4:97:0F:7B:04:E6:19:E8:CB:72:91:7C:29:64:B1:7E:9F:9C:E1
            X509v3 Authority Key Identifier:
                keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:db:e2:57:f5:d9:b6:f4:9a:c8:15:eb:aa:c6:6b:34:28:77:
         53:04:fb:5f:00:38:e5:1a:4d:eb:81:a2:c7:3d:b3:af:9b:81:
         b8:d7:d1:35:d7:cf:c3:35:72:0b:4a:12:83:f8:db:04:c1:cb:
         3d:74:fe:d2:2f:27:20:87:e9:a6:47:8f:22:81:9a:44:6f:26:
         cc:a0:86:eb:24:64:ed:66:9c:12:4d:8c:90:32:28:72:fb:62:
         07:04:38:fc:12:e8:b7:f4:c7:a1:4c:e8:17:5a:1b:c4:eb:4e:
         bc:97:ab:52:c8:d2:dc:d8:e5:41:4a:53:00:2a:97:35:e2:03:
         ef:27:43:47:aa:20:8c:78:2d:51:c9:c3:a3:1b:d1:ad:e3:18:
         b2:01:e3:d5:ea:1f:f7:35:a7:2d:39:bc:ea:85:75:71:1d:eb:
         09:12:29:89:e1:39:f4:ad:40:b8:67:ec:23:95:f3:44:10:a2:
         e0:77:93:08:5a:2d:32:90:ea:62:31:e3:5f:52:13:23:9e:74:
         8f:3a:08:37:ea:fe:03:a0:f6:57:7b:bc:e7:04:38:38:9a:25:
         77:4d:6d:fe:14:28:75:2b:c9:3c:37:7f:3e:42:a9:92:1f:30:
         c1:aa:6f:cd:22:35:d0:0e:b9:8a:e3:14:9c:bf:3c:8c:9e:e9:
         20:38:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:05 2026 by rpki-client